Photo Gallery
|
|
OpenSCA
Additional Info
| Company | Xmirror Security |
| Company size | 100 - 499 employees |
| Website | https://www.xmirror.cn/ |
NOMINATION HIGHLIGHTS
OpenSCA is the open-sourced version of Xcheck OSS (Open-Source Security Platform) under Xmirror Security. It succeeded the core capabilities of Xcheck OSS’s SCA open-source application security defect detection. Through software component analysis, dependency analysis, feature analysis, reference identification, compliance analysis, etc., OpenSCA can deeply explore various security vulnerabilities and open-source protocol risks hidden in components, and discover known security vulnerabilities in advance to reduce the risk of users facing of security attacks in the software supply chain.
How we are different
1. Support for various languages, supported by vast knowledge base
• Support for software component analysis of multiple mainstream programming languages including but not limited to Java, JavaScript, PHP.
• Supported by a mass of real-time component database, vulnerability database, license database, feature database in cloud platform.
2. Component dependency parsing and Visualized SBOM analysis
• Parsing of components’ direct dependency and indirect dependency.
• Analyze component security vulnerabilities, and position the affected area quickly and repair it in time.
• Visualized SBOM (Software Bill of Material) helps to sort out internal software assets quickly.
3. License compliance analysis and intellectual property security protection
• Support for mainstream licenses detection.
• Analyze the compliance and compatibility risks of open-source licenses.
Help This Nominee Win a
Community Choice Award
Vote by sharing this page:
Cast your vote by sharing this nominee’s profile on LinkedIn, Facebook, or X, using the buttons above. Each completed social share adds one Community Choice vote.
Votes cast by July 10, 2027 will determine the Community Choice winners (independent of the jury awards). Winners will be announced before Black Hat USA.
What is the Community Choice Award? →
Community Choice is a separate award track from the jury-selected Cybersecurity Excellence Awards. Jury winners are chosen by expert judges, while Community Choice winners are determined by public voting. A nominee may be honored by the jury, the community, or both.


